@Matt_   I can give you two easy steps , it may reduce your burden     1. To list the valid kerberos principal $ cd /var/run/cloudera-scm-agent/process/<pid>-hdfs-DATANODE $ klist -kt hdfs.keytab ## The klist command will list the valid kerbros principal in the following format "hdfs/<NODE_FQDN>@<OUR_REALM>" 2. to kinit with the aboev listed full path $ kinit -kt hdfs.keytab <copy paste the any one of the hdfs principal from the above klist>     ... View more